Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
File: TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json)
Hash identifier: 7rg8K/p9AcUe32kODhpXBXaILjl5g6JORJe0Qx3M0TI=
Subject key identifier: E6:65:1C:49:6F:78:32:BA:8D:FB:65:9B:C5:40:69:21:34:44:9A:44
Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
Certificate issuer: /CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Certificate serial: 019896006A7087754123A045CD20394EEF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
Manifest number: 12B8
Signing time: Sun 10 Aug 2025 22:01:06 +0000
Manifest this update: Sun 10 Aug 2025 22:01:06 +0000
Manifest next update: Mon 11 Aug 2025 22:01:06 +0000
Files and hashes: 1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: LFmHzL6aHaY/LoOHEyCutfHvOhme6OcCqkrEZhBmkbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:6a:70:87:75:41:23:a0:45:cd:20:39:4e:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Validity
Not Before: Aug 10 22:01:06 2025 GMT
Not After : Aug 11 22:01:06 2025 GMT
Subject: CN=e6651c496f7832ba8dfb659bc540692134449a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:59:f7:8d:01:83:3c:34:0c:88:c1:00:9e:
d2:5a:0e:97:9b:fe:08:99:0a:1c:e9:33:3b:dc:ba:
7f:85:22:82:0c:62:33:ed:5a:cc:d6:82:6e:a7:54:
0a:1b:fe:ed:7d:89:f1:f1:4d:d5:43:64:9b:1a:db:
8b:2a:0e:a9:1e:5a:41:ce:e4:75:e9:40:4c:1a:e5:
a8:91:bf:5b:b5:be:48:c9:34:60:03:95:5e:49:eb:
70:1a:32:6a:9c:b3:2c:00:3f:a0:c4:da:de:4c:e2:
df:c4:48:c6:8d:0f:32:a4:6a:c3:ac:03:15:ee:66:
76:ab:08:43:5c:90:c8:3b:6f:b7:4a:e8:7c:f1:37:
c1:6a:04:8f:f3:35:d8:e1:a5:1d:0c:6c:a0:a2:1a:
40:70:25:24:10:40:e1:ea:fb:01:a7:7e:c3:4d:93:
ba:dc:f1:e4:7b:fc:0f:b6:a7:fc:94:70:99:1d:f0:
5d:b2:ab:d7:a8:a3:b9:ab:68:b9:96:82:9a:ea:99:
89:1b:8b:74:a0:d7:e6:9a:d9:df:34:9a:c6:c5:ed:
e9:c3:78:09:03:ef:88:bf:cf:43:7b:10:5f:b4:ef:
15:7c:65:dd:72:34:72:ee:24:78:48:1f:6a:84:84:
41:67:fd:f9:22:b2:46:2e:9e:1f:43:7f:10:8f:ae:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:1C:49:6F:78:32:BA:8D:FB:65:9B:C5:40:69:21:34:44:9A:44
X509v3 Authority Key Identifier:
keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:eb:32:3a:22:db:87:75:0f:fe:4a:b8:cd:a8:bc:6a:ed:e3:
9e:70:6c:94:13:81:0a:57:65:86:e4:b3:72:b7:89:cf:23:0e:
2d:df:4e:92:9c:34:09:58:ec:d8:8c:d2:6f:90:92:07:8d:ae:
94:98:02:e6:8f:0b:7d:21:b8:90:5e:a1:10:92:db:c2:a3:ee:
d8:d2:53:bd:c2:d7:14:59:3b:58:e7:26:9b:a1:df:52:8c:b6:
2b:f9:8e:9e:18:c0:ef:74:85:85:b4:cf:a4:f4:b3:36:af:d9:
b8:c5:7c:99:8e:45:5f:a2:8b:de:b5:f0:6c:28:69:33:01:c7:
06:7a:dc:c1:a3:15:53:93:60:a4:f1:5d:59:42:9d:26:f9:bb:
fd:fd:a1:c2:a4:c7:06:a7:f2:8e:b7:46:6f:ba:1a:bd:86:cb:
7d:6b:33:91:ca:c4:5c:93:f3:f1:d8:fa:e9:df:aa:60:ae:ce:
5c:5b:cc:37:11:2a:25:55:ed:39:88:c1:83:09:bb:8c:28:a0:
6f:9d:b7:46:a8:0f:f9:99:b2:ab:1e:7e:9b:b5:c3:0f:14:49:
d5:49:e0:9e:93:15:7c:cd:0d:2c:8d:46:6c:99:84:a9:db:d0:
8d:e2:7e:e8:b5:f3:20:95:6f:5e:df:34:a5:ca:57:70:51:b3:
45:f0:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:14 2025 by rpki-client